[ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.155' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 139.532169][ T2949] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 140.052536][ T2949] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 140.061994][ T2949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.070124][ T2949] usb 1-1: Product: syz [ 140.074597][ T2949] usb 1-1: Manufacturer: syz [ 140.079300][ T2949] usb 1-1: SerialNumber: syz [ 140.133350][ T2949] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 140.792237][ T7] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 141.012296][ C0] ===================================================== [ 141.019259][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x28c/0x1f60 [ 141.021970][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.12.0-rc6-syzkaller #0 [ 141.021970][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.021970][ C0] Call Trace: [ 141.021970][ C0] [ 141.021970][ C0] dump_stack+0x24c/0x2e0 [ 141.021970][ C0] kmsan_report+0xfb/0x1e0 [ 141.021970][ C0] __msan_warning+0x5c/0xa0 [ 141.021970][ C0] ath9k_htc_rx_msg+0x28c/0x1f60 [ 141.021970][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 141.021970][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 141.021970][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.021970][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.021970][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 141.021970][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.021970][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.021970][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.021970][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.021970][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 141.021970][ C0] dummy_timer+0xda7/0x74f0 [ 141.021970][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.021970][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.021970][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 141.021970][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.021970][ C0] call_timer_fn+0x7d/0x450 [ 141.021970][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.021970][ C0] expire_timers+0x328/0x6c0 [ 141.021970][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.021970][ C0] __run_timers+0x624/0x9e0 [ 141.021970][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 141.021970][ C0] ? irqtime_account_irq+0x5e/0x380 [ 141.021970][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.021970][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 141.198391][ T3077] usb 1-1: USB disconnect, device number 2 [ 141.197239][ C0] run_timer_softirq+0x2d/0x50 [ 141.197239][ C0] __do_softirq+0x1b9/0x715 [ 141.213865][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.213865][ C0] __irq_exit_rcu+0x22f/0x280 [ 141.213865][ C0] irq_exit_rcu+0xe/0x10 [ 141.213865][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 141.213865][ C0] [ 141.213865][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 141.213865][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 141.213865][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 141.213865][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 141.213865][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 141.213865][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.213865][ C0] RBP: ffffffff91603c08 R08: ffffffff86904dce R09: ffff88813fffa000 [ 141.213865][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 141.305503][ C0] R13: ffff888103d5c064 R14: 0000000000000000 R15: ffffffff91631ac8 [ 141.305503][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 141.305503][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 141.305503][ C0] cpuidle_enter_state+0x99e/0x1750 [ 141.305503][ C0] cpuidle_enter+0xe3/0x170 [ 141.305503][ C0] do_idle+0x5df/0x790 [ 141.305503][ C0] cpu_startup_entry+0x45/0x50 [ 141.305503][ C0] rest_init+0x1c8/0x1f0 [ 141.305503][ C0] arch_call_rest_init+0x13/0x15 [ 141.305503][ C0] start_kernel+0xa17/0xbd8 [ 141.305503][ C0] x86_64_start_reservations+0x2a/0x2c [ 141.305503][ C0] x86_64_start_kernel+0x86/0x89 [ 141.305503][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 141.305503][ C0] [ 141.305503][ C0] Uninit was created at: [ 141.305503][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 141.305503][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 141.305503][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 141.305503][ C0] __alloc_skb+0x4dd/0xe90 [ 141.305503][ C0] __netdev_alloc_skb+0x45d/0x810 [ 141.305503][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 141.305503][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.305503][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.305503][ C0] dummy_timer+0xda7/0x74f0 [ 141.305503][ C0] call_timer_fn+0x7d/0x450 [ 141.305503][ C0] expire_timers+0x328/0x6c0 [ 141.305503][ C0] __run_timers+0x624/0x9e0 [ 141.305503][ C0] run_timer_softirq+0x2d/0x50 [ 141.305503][ C0] __do_softirq+0x1b9/0x715 [ 141.305503][ C0] ===================================================== [ 141.305503][ C0] Disabling lock debugging due to kernel taint [ 141.305503][ C0] ===================================================== [ 141.305503][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x4c0/0x1f60 [ 141.305503][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 141.305503][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.305503][ C0] Call Trace: [ 141.305503][ C0] [ 141.305503][ C0] dump_stack+0x24c/0x2e0 [ 141.305503][ C0] kmsan_report+0xfb/0x1e0 [ 141.305503][ C0] __msan_warning+0x5c/0xa0 [ 141.305503][ C0] ath9k_htc_rx_msg+0x4c0/0x1f60 [ 141.305503][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 141.305503][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 141.305503][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 141.305503][ C0] dummy_timer+0xda7/0x74f0 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 141.305503][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.305503][ C0] call_timer_fn+0x7d/0x450 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] expire_timers+0x328/0x6c0 [ 141.305503][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.305503][ C0] __run_timers+0x624/0x9e0 [ 141.305503][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 141.305503][ C0] ? irqtime_account_irq+0x5e/0x380 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 141.305503][ C0] run_timer_softirq+0x2d/0x50 [ 141.305503][ C0] __do_softirq+0x1b9/0x715 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] __irq_exit_rcu+0x22f/0x280 [ 141.305503][ C0] irq_exit_rcu+0xe/0x10 [ 141.305503][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 141.305503][ C0] [ 141.305503][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 141.305503][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 141.305503][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 141.305503][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 141.305503][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 141.305503][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.305503][ C0] RBP: ffffffff91603c08 R08: ffffffff86904dce R09: ffff88813fffa000 [ 141.305503][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 141.305503][ C0] R13: ffff888103d5c064 R14: 0000000000000000 R15: ffffffff91631ac8 [ 141.305503][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 141.305503][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 141.305503][ C0] cpuidle_enter_state+0x99e/0x1750 [ 141.305503][ C0] cpuidle_enter+0xe3/0x170 [ 141.305503][ C0] do_idle+0x5df/0x790 [ 141.305503][ C0] cpu_startup_entry+0x45/0x50 [ 141.305503][ C0] rest_init+0x1c8/0x1f0 [ 141.305503][ C0] arch_call_rest_init+0x13/0x15 [ 141.305503][ C0] start_kernel+0xa17/0xbd8 [ 141.305503][ C0] x86_64_start_reservations+0x2a/0x2c [ 141.305503][ C0] x86_64_start_kernel+0x86/0x89 [ 141.305503][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 141.305503][ C0] [ 141.305503][ C0] Uninit was created at: [ 141.305503][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 141.305503][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 141.305503][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 141.305503][ C0] __alloc_skb+0x4dd/0xe90 [ 141.305503][ C0] __netdev_alloc_skb+0x45d/0x810 [ 141.305503][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 141.305503][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.305503][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.305503][ C0] dummy_timer+0xda7/0x74f0 [ 141.305503][ C0] call_timer_fn+0x7d/0x450 [ 141.305503][ C0] expire_timers+0x328/0x6c0 [ 141.305503][ C0] __run_timers+0x624/0x9e0 [ 141.305503][ C0] run_timer_softirq+0x2d/0x50 [ 141.305503][ C0] __do_softirq+0x1b9/0x715 [ 141.305503][ C0] ===================================================== [ 141.305503][ C0] ===================================================== [ 141.305503][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x7b8/0x1f60 [ 141.305503][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 141.305503][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.305503][ C0] Call Trace: [ 141.305503][ C0] [ 141.305503][ C0] dump_stack+0x24c/0x2e0 [ 141.305503][ C0] kmsan_report+0xfb/0x1e0 [ 141.305503][ C0] __msan_warning+0x5c/0xa0 [ 141.305503][ C0] ath9k_htc_rx_msg+0x7b8/0x1f60 [ 141.305503][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 141.305503][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 141.305503][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 141.305503][ C0] dummy_timer+0xda7/0x74f0 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 141.305503][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.305503][ C0] call_timer_fn+0x7d/0x450 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] expire_timers+0x328/0x6c0 [ 141.305503][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.305503][ C0] __run_timers+0x624/0x9e0 [ 141.305503][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 141.305503][ C0] ? irqtime_account_irq+0x5e/0x380 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 141.305503][ C0] run_timer_softirq+0x2d/0x50 [ 141.305503][ C0] __do_softirq+0x1b9/0x715 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] __irq_exit_rcu+0x22f/0x280 [ 141.305503][ C0] irq_exit_rcu+0xe/0x10 [ 141.305503][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 141.305503][ C0] [ 141.305503][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 141.305503][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 141.305503][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 141.305503][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 141.305503][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 141.305503][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.305503][ C0] RBP: ffffffff91603c08 R08: ffffffff86904dce R09: ffff88813fffa000 [ 141.305503][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 141.305503][ C0] R13: ffff888103d5c064 R14: 0000000000000000 R15: ffffffff91631ac8 [ 141.305503][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 141.305503][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 141.305503][ C0] cpuidle_enter_state+0x99e/0x1750 [ 141.305503][ C0] cpuidle_enter+0xe3/0x170 [ 141.305503][ C0] do_idle+0x5df/0x790 [ 141.305503][ C0] cpu_startup_entry+0x45/0x50 [ 141.305503][ C0] rest_init+0x1c8/0x1f0 [ 141.305503][ C0] arch_call_rest_init+0x13/0x15 [ 141.305503][ C0] start_kernel+0xa17/0xbd8 [ 141.305503][ C0] x86_64_start_reservations+0x2a/0x2c [ 141.305503][ C0] x86_64_start_kernel+0x86/0x89 [ 141.305503][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 141.305503][ C0] [ 141.305503][ C0] Uninit was created at: [ 141.305503][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 141.305503][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 141.305503][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 141.305503][ C0] __alloc_skb+0x4dd/0xe90 [ 141.305503][ C0] __netdev_alloc_skb+0x45d/0x810 [ 141.305503][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 141.305503][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.305503][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.305503][ C0] dummy_timer+0xda7/0x74f0 [ 141.305503][ C0] call_timer_fn+0x7d/0x450 [ 141.305503][ C0] expire_timers+0x328/0x6c0 [ 141.305503][ C0] __run_timers+0x624/0x9e0 [ 141.305503][ C0] run_timer_softirq+0x2d/0x50 [ 141.305503][ C0] __do_softirq+0x1b9/0x715 [ 141.305503][ C0] ===================================================== [ 141.305503][ C0] ===================================================== [ 141.305503][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x80c/0x1f60 [ 141.305503][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 141.305503][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.305503][ C0] Call Trace: [ 141.305503][ C0] [ 141.305503][ C0] dump_stack+0x24c/0x2e0 [ 141.305503][ C0] kmsan_report+0xfb/0x1e0 [ 141.305503][ C0] __msan_warning+0x5c/0xa0 [ 141.305503][ C0] ath9k_htc_rx_msg+0x80c/0x1f60 [ 141.305503][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 141.305503][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 141.305503][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 141.305503][ C0] dummy_timer+0xda7/0x74f0 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 141.305503][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.305503][ C0] call_timer_fn+0x7d/0x450 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] expire_timers+0x328/0x6c0 [ 141.305503][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.305503][ C0] __run_timers+0x624/0x9e0 [ 141.305503][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 141.305503][ C0] ? irqtime_account_irq+0x5e/0x380 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 141.305503][ C0] run_timer_softirq+0x2d/0x50 [ 141.305503][ C0] __do_softirq+0x1b9/0x715 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] __irq_exit_rcu+0x22f/0x280 [ 141.305503][ C0] irq_exit_rcu+0xe/0x10 [ 141.305503][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 141.305503][ C0] [ 141.305503][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 141.305503][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 141.305503][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 141.305503][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 141.305503][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 141.305503][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.305503][ C0] RBP: ffffffff91603c08 R08: ffffffff86904dce R09: ffff88813fffa000 [ 141.305503][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 141.305503][ C0] R13: ffff888103d5c064 R14: 0000000000000000 R15: ffffffff91631ac8 [ 141.305503][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 141.305503][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 141.305503][ C0] cpuidle_enter_state+0x99e/0x1750 [ 141.305503][ C0] cpuidle_enter+0xe3/0x170 [ 141.305503][ C0] do_idle+0x5df/0x790 [ 141.305503][ C0] cpu_startup_entry+0x45/0x50 [ 141.305503][ C0] rest_init+0x1c8/0x1f0 [ 141.305503][ C0] arch_call_rest_init+0x13/0x15 [ 141.305503][ C0] start_kernel+0xa17/0xbd8 [ 141.305503][ C0] x86_64_start_reservations+0x2a/0x2c [ 141.305503][ C0] x86_64_start_kernel+0x86/0x89 [ 141.305503][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 141.305503][ C0] [ 141.305503][ C0] Uninit was created at: [ 141.305503][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 141.305503][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 141.305503][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 141.305503][ C0] __alloc_skb+0x4dd/0xe90 [ 141.305503][ C0] __netdev_alloc_skb+0x45d/0x810 [ 141.305503][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 141.305503][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.305503][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.305503][ C0] dummy_timer+0xda7/0x74f0 [ 141.305503][ C0] call_timer_fn+0x7d/0x450 [ 141.305503][ C0] expire_timers+0x328/0x6c0 [ 141.305503][ C0] __run_timers+0x624/0x9e0 [ 141.305503][ C0] run_timer_softirq+0x2d/0x50 [ 141.305503][ C0] __do_softirq+0x1b9/0x715 [ 141.305503][ C0] ===================================================== [ 141.305503][ C0] ===================================================== [ 141.305503][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x96f/0x1f60 [ 141.305503][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 141.305503][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.305503][ C0] Call Trace: [ 141.305503][ C0] [ 141.305503][ C0] dump_stack+0x24c/0x2e0 [ 141.305503][ C0] kmsan_report+0xfb/0x1e0 [ 141.305503][ C0] __msan_warning+0x5c/0xa0 [ 141.305503][ C0] ath9k_htc_rx_msg+0x96f/0x1f60 [ 141.305503][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 141.305503][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 141.305503][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 141.305503][ C0] dummy_timer+0xda7/0x74f0 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 141.305503][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.305503][ C0] call_timer_fn+0x7d/0x450 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] expire_timers+0x328/0x6c0 [ 141.305503][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.305503][ C0] __run_timers+0x624/0x9e0 [ 141.305503][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 141.305503][ C0] ? irqtime_account_irq+0x5e/0x380 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 141.305503][ C0] run_timer_softirq+0x2d/0x50 [ 141.305503][ C0] __do_softirq+0x1b9/0x715 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] __irq_exit_rcu+0x22f/0x280 [ 141.305503][ C0] irq_exit_rcu+0xe/0x10 [ 141.305503][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 141.305503][ C0] [ 141.305503][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 141.305503][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 141.305503][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 141.305503][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 141.305503][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 141.305503][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.305503][ C0] RBP: ffffffff91603c08 R08: ffffffff86904dce R09: ffff88813fffa000 [ 141.305503][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 141.305503][ C0] R13: ffff888103d5c064 R14: 0000000000000000 R15: ffffffff91631ac8 [ 141.305503][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 141.305503][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 141.305503][ C0] cpuidle_enter_state+0x99e/0x1750 [ 141.305503][ C0] cpuidle_enter+0xe3/0x170 [ 141.305503][ C0] do_idle+0x5df/0x790 [ 141.305503][ C0] cpu_startup_entry+0x45/0x50 [ 141.305503][ C0] rest_init+0x1c8/0x1f0 [ 141.305503][ C0] arch_call_rest_init+0x13/0x15 [ 141.305503][ C0] start_kernel+0xa17/0xbd8 [ 141.305503][ C0] x86_64_start_reservations+0x2a/0x2c [ 141.305503][ C0] x86_64_start_kernel+0x86/0x89 [ 141.305503][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 141.305503][ C0] [ 141.305503][ C0] Uninit was created at: [ 141.305503][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 141.305503][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 141.305503][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 141.305503][ C0] __alloc_skb+0x4dd/0xe90 [ 141.305503][ C0] __netdev_alloc_skb+0x45d/0x810 [ 141.305503][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 141.305503][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.305503][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.305503][ C0] dummy_timer+0xda7/0x74f0 [ 141.305503][ C0] call_timer_fn+0x7d/0x450 [ 141.305503][ C0] expire_timers+0x328/0x6c0 [ 141.305503][ C0] __run_timers+0x624/0x9e0 [ 141.305503][ C0] run_timer_softirq+0x2d/0x50 [ 141.305503][ C0] __do_softirq+0x1b9/0x715 [ 141.305503][ C0] ===================================================== [ 141.305503][ C0] ===================================================== [ 141.305503][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x28c/0x1f60 [ 141.305503][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 141.305503][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.305503][ C0] Call Trace: [ 141.305503][ C0] [ 141.305503][ C0] dump_stack+0x24c/0x2e0 [ 141.305503][ C0] kmsan_report+0xfb/0x1e0 [ 141.305503][ C0] __msan_warning+0x5c/0xa0 [ 141.305503][ C0] ath9k_htc_rx_msg+0x28c/0x1f60 [ 141.305503][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 141.305503][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 141.305503][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 141.305503][ C0] dummy_timer+0xda7/0x74f0 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 141.305503][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.305503][ C0] call_timer_fn+0x7d/0x450 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] expire_timers+0x328/0x6c0 [ 141.305503][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.305503][ C0] __run_timers+0x624/0x9e0 [ 141.305503][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 141.305503][ C0] ? irqtime_account_irq+0x5e/0x380 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 141.305503][ C0] run_timer_softirq+0x2d/0x50 [ 141.305503][ C0] __do_softirq+0x1b9/0x715 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] __irq_exit_rcu+0x22f/0x280 [ 141.305503][ C0] irq_exit_rcu+0xe/0x10 [ 141.305503][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 141.305503][ C0] [ 141.305503][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 141.305503][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 141.305503][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 141.305503][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 141.305503][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 141.305503][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.305503][ C0] RBP: ffffffff91603c08 R08: ffffffff86904dce R09: ffff88813fffa000 [ 141.305503][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 141.305503][ C0] R13: ffff888103d5c064 R14: 0000000000000000 R15: ffffffff91631ac8 [ 141.305503][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 141.305503][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 141.305503][ C0] cpuidle_enter_state+0x99e/0x1750 [ 141.305503][ C0] cpuidle_enter+0xe3/0x170 [ 141.305503][ C0] do_idle+0x5df/0x790 [ 141.305503][ C0] cpu_startup_entry+0x45/0x50 [ 141.305503][ C0] rest_init+0x1c8/0x1f0 [ 141.305503][ C0] arch_call_rest_init+0x13/0x15 [ 141.305503][ C0] start_kernel+0xa17/0xbd8 [ 141.305503][ C0] x86_64_start_reservations+0x2a/0x2c [ 141.305503][ C0] x86_64_start_kernel+0x86/0x89 [ 141.305503][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 141.305503][ C0] [ 141.305503][ C0] Uninit was created at: [ 141.305503][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 141.305503][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 141.305503][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 141.305503][ C0] __alloc_skb+0x4dd/0xe90 [ 141.305503][ C0] __netdev_alloc_skb+0x45d/0x810 [ 141.305503][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 141.305503][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.305503][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.305503][ C0] dummy_timer+0xda7/0x74f0 [ 141.305503][ C0] call_timer_fn+0x7d/0x450 [ 141.305503][ C0] expire_timers+0x328/0x6c0 [ 141.305503][ C0] __run_timers+0x624/0x9e0 [ 141.305503][ C0] run_timer_softirq+0x2d/0x50 [ 141.305503][ C0] __do_softirq+0x1b9/0x715 [ 141.305503][ C0] ===================================================== [ 141.305503][ C0] ===================================================== [ 141.305503][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x4c0/0x1f60 [ 141.305503][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 141.305503][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.305503][ C0] Call Trace: [ 141.305503][ C0] [ 141.305503][ C0] dump_stack+0x24c/0x2e0 [ 141.305503][ C0] kmsan_report+0xfb/0x1e0 [ 141.305503][ C0] __msan_warning+0x5c/0xa0 [ 141.305503][ C0] ath9k_htc_rx_msg+0x4c0/0x1f60 [ 141.305503][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 141.305503][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 141.305503][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 141.305503][ C0] dummy_timer+0xda7/0x74f0 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 141.305503][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.305503][ C0] call_timer_fn+0x7d/0x450 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] expire_timers+0x328/0x6c0 [ 141.305503][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.305503][ C0] __run_timers+0x624/0x9e0 [ 141.305503][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 141.305503][ C0] ? irqtime_account_irq+0x5e/0x380 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 141.305503][ C0] run_timer_softirq+0x2d/0x50 [ 141.305503][ C0] __do_softirq+0x1b9/0x715 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] __irq_exit_rcu+0x22f/0x280 [ 141.305503][ C0] irq_exit_rcu+0xe/0x10 [ 141.305503][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 141.305503][ C0] [ 141.305503][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 141.305503][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 141.305503][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 141.305503][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 141.305503][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 141.305503][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.305503][ C0] RBP: ffffffff91603c08 R08: ffffffff86904dce R09: ffff88813fffa000 [ 141.305503][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 141.305503][ C0] R13: ffff888103d5c064 R14: 0000000000000000 R15: ffffffff91631ac8 [ 141.305503][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 141.305503][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 141.305503][ C0] cpuidle_enter_state+0x99e/0x1750 [ 141.305503][ C0] cpuidle_enter+0xe3/0x170 [ 141.305503][ C0] do_idle+0x5df/0x790 [ 141.305503][ C0] cpu_startup_entry+0x45/0x50 [ 141.305503][ C0] rest_init+0x1c8/0x1f0 [ 141.305503][ C0] arch_call_rest_init+0x13/0x15 [ 141.305503][ C0] start_kernel+0xa17/0xbd8 [ 141.305503][ C0] x86_64_start_reservations+0x2a/0x2c [ 141.305503][ C0] x86_64_start_kernel+0x86/0x89 [ 141.305503][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 141.305503][ C0] [ 141.305503][ C0] Uninit was created at: [ 141.305503][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 141.305503][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 141.305503][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 141.305503][ C0] __alloc_skb+0x4dd/0xe90 [ 141.305503][ C0] __netdev_alloc_skb+0x45d/0x810 [ 141.305503][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 141.305503][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.305503][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.305503][ C0] dummy_timer+0xda7/0x74f0 [ 141.305503][ C0] call_timer_fn+0x7d/0x450 [ 141.305503][ C0] expire_timers+0x328/0x6c0 [ 141.305503][ C0] __run_timers+0x624/0x9e0 [ 141.305503][ C0] run_timer_softirq+0x2d/0x50 [ 141.305503][ C0] __do_softirq+0x1b9/0x715 [ 141.305503][ C0] ===================================================== [ 141.305503][ C0] ===================================================== [ 141.305503][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x7b8/0x1f60 [ 141.305503][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 141.305503][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.305503][ C0] Call Trace: [ 141.305503][ C0] [ 141.305503][ C0] dump_stack+0x24c/0x2e0 [ 141.305503][ C0] kmsan_report+0xfb/0x1e0 [ 141.305503][ C0] __msan_warning+0x5c/0xa0 [ 141.305503][ C0] ath9k_htc_rx_msg+0x7b8/0x1f60 [ 141.305503][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 141.305503][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 141.305503][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 141.305503][ C0] dummy_timer+0xda7/0x74f0 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 141.305503][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.305503][ C0] call_timer_fn+0x7d/0x450 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] expire_timers+0x328/0x6c0 [ 141.305503][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.305503][ C0] __run_timers+0x624/0x9e0 [ 141.305503][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 141.305503][ C0] ? irqtime_account_irq+0x5e/0x380 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 141.305503][ C0] run_timer_softirq+0x2d/0x50 [ 141.305503][ C0] __do_softirq+0x1b9/0x715 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] __irq_exit_rcu+0x22f/0x280 [ 141.305503][ C0] irq_exit_rcu+0xe/0x10 [ 141.305503][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 141.305503][ C0] [ 141.305503][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 141.305503][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 141.305503][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 141.305503][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 141.305503][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 141.305503][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.305503][ C0] RBP: ffffffff91603c08 R08: ffffffff86904dce R09: ffff88813fffa000 [ 141.305503][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 141.305503][ C0] R13: ffff888103d5c064 R14: 0000000000000000 R15: ffffffff91631ac8 [ 141.305503][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 141.305503][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 141.305503][ C0] cpuidle_enter_state+0x99e/0x1750 [ 141.305503][ C0] cpuidle_enter+0xe3/0x170 [ 141.305503][ C0] do_idle+0x5df/0x790 [ 141.305503][ C0] cpu_startup_entry+0x45/0x50 [ 141.305503][ C0] rest_init+0x1c8/0x1f0 [ 141.305503][ C0] arch_call_rest_init+0x13/0x15 [ 141.305503][ C0] start_kernel+0xa17/0xbd8 [ 141.305503][ C0] x86_64_start_reservations+0x2a/0x2c [ 141.305503][ C0] x86_64_start_kernel+0x86/0x89 [ 141.305503][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 141.305503][ C0] [ 141.305503][ C0] Uninit was created at: [ 141.305503][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 141.305503][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 141.305503][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 141.305503][ C0] __alloc_skb+0x4dd/0xe90 [ 141.305503][ C0] __netdev_alloc_skb+0x45d/0x810 [ 141.305503][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 141.305503][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.305503][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.305503][ C0] dummy_timer+0xda7/0x74f0 [ 141.305503][ C0] call_timer_fn+0x7d/0x450 [ 141.305503][ C0] expire_timers+0x328/0x6c0 [ 141.305503][ C0] __run_timers+0x624/0x9e0 [ 141.305503][ C0] run_timer_softirq+0x2d/0x50 [ 141.305503][ C0] __do_softirq+0x1b9/0x715 [ 141.305503][ C0] ===================================================== [ 141.305503][ C0] ===================================================== [ 141.305503][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x80c/0x1f60 [ 141.305503][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 141.305503][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.305503][ C0] Call Trace: [ 141.305503][ C0] [ 141.305503][ C0] dump_stack+0x24c/0x2e0 [ 141.305503][ C0] kmsan_report+0xfb/0x1e0 [ 141.305503][ C0] __msan_warning+0x5c/0xa0 [ 141.305503][ C0] ath9k_htc_rx_msg+0x80c/0x1f60 [ 141.305503][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 141.305503][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 141.305503][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 141.305503][ C0] dummy_timer+0xda7/0x74f0 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 141.305503][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.305503][ C0] call_timer_fn+0x7d/0x450 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] expire_timers+0x328/0x6c0 [ 141.305503][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.305503][ C0] __run_timers+0x624/0x9e0 [ 141.305503][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 141.305503][ C0] ? irqtime_account_irq+0x5e/0x380 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 141.305503][ C0] run_timer_softirq+0x2d/0x50 [ 141.305503][ C0] __do_softirq+0x1b9/0x715 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] __irq_exit_rcu+0x22f/0x280 [ 141.305503][ C0] irq_exit_rcu+0xe/0x10 [ 141.305503][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 141.305503][ C0] [ 141.305503][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 141.305503][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 141.305503][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 141.305503][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 141.305503][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 141.305503][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.305503][ C0] RBP: ffffffff91603c08 R08: ffffffff86904dce R09: ffff88813fffa000 [ 141.305503][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 141.305503][ C0] R13: ffff888103d5c064 R14: 0000000000000000 R15: ffffffff91631ac8 [ 141.305503][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 141.305503][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 141.305503][ C0] cpuidle_enter_state+0x99e/0x1750 [ 141.305503][ C0] cpuidle_enter+0xe3/0x170 [ 141.305503][ C0] do_idle+0x5df/0x790 [ 141.305503][ C0] cpu_startup_entry+0x45/0x50 [ 141.305503][ C0] rest_init+0x1c8/0x1f0 [ 141.305503][ C0] arch_call_rest_init+0x13/0x15 [ 141.305503][ C0] start_kernel+0xa17/0xbd8 [ 141.305503][ C0] x86_64_start_reservations+0x2a/0x2c [ 141.305503][ C0] x86_64_start_kernel+0x86/0x89 [ 141.305503][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 141.305503][ C0] [ 141.305503][ C0] Uninit was created at: [ 141.305503][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 141.305503][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 141.305503][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 141.305503][ C0] __alloc_skb+0x4dd/0xe90 [ 141.305503][ C0] __netdev_alloc_skb+0x45d/0x810 [ 141.305503][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 141.305503][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.305503][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.305503][ C0] dummy_timer+0xda7/0x74f0 [ 141.305503][ C0] call_timer_fn+0x7d/0x450 [ 141.305503][ C0] expire_timers+0x328/0x6c0 [ 141.305503][ C0] __run_timers+0x624/0x9e0 [ 141.305503][ C0] run_timer_softirq+0x2d/0x50 [ 141.305503][ C0] __do_softirq+0x1b9/0x715 [ 141.305503][ C0] ===================================================== [ 141.305503][ C0] ===================================================== [ 141.305503][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x96f/0x1f60 [ 141.305503][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 141.305503][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.305503][ C0] Call Trace: [ 141.305503][ C0] [ 141.305503][ C0] dump_stack+0x24c/0x2e0 [ 141.305503][ C0] kmsan_report+0xfb/0x1e0 [ 141.305503][ C0] __msan_warning+0x5c/0xa0 [ 141.305503][ C0] ath9k_htc_rx_msg+0x96f/0x1f60 [ 141.305503][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 141.305503][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 141.305503][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 141.305503][ C0] dummy_timer+0xda7/0x74f0 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 141.305503][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.305503][ C0] call_timer_fn+0x7d/0x450 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] expire_timers+0x328/0x6c0 [ 141.305503][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.305503][ C0] __run_timers+0x624/0x9e0 [ 141.305503][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 141.305503][ C0] ? irqtime_account_irq+0x5e/0x380 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 141.305503][ C0] run_timer_softirq+0x2d/0x50 [ 141.305503][ C0] __do_softirq+0x1b9/0x715 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] __irq_exit_rcu+0x22f/0x280 [ 141.305503][ C0] irq_exit_rcu+0xe/0x10 [ 141.305503][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 141.305503][ C0] [ 141.305503][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 141.305503][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 141.305503][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 141.305503][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 141.305503][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 141.305503][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.305503][ C0] RBP: ffffffff91603c08 R08: ffffffff86904dce R09: ffff88813fffa000 [ 141.305503][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 141.305503][ C0] R13: ffff888103d5c064 R14: 0000000000000000 R15: ffffffff91631ac8 [ 141.305503][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 141.305503][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 141.305503][ C0] cpuidle_enter_state+0x99e/0x1750 [ 141.305503][ C0] cpuidle_enter+0xe3/0x170 [ 141.305503][ C0] do_idle+0x5df/0x790 [ 141.305503][ C0] cpu_startup_entry+0x45/0x50 [ 141.305503][ C0] rest_init+0x1c8/0x1f0 [ 141.305503][ C0] arch_call_rest_init+0x13/0x15 [ 141.305503][ C0] start_kernel+0xa17/0xbd8 [ 141.305503][ C0] x86_64_start_reservations+0x2a/0x2c [ 141.305503][ C0] x86_64_start_kernel+0x86/0x89 [ 141.305503][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 141.305503][ C0] [ 141.305503][ C0] Uninit was created at: [ 141.305503][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 141.305503][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 141.305503][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 141.305503][ C0] __alloc_skb+0x4dd/0xe90 [ 141.305503][ C0] __netdev_alloc_skb+0x45d/0x810 [ 141.305503][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 141.305503][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.305503][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.305503][ C0] dummy_timer+0xda7/0x74f0 [ 141.305503][ C0] call_timer_fn+0x7d/0x450 [ 141.305503][ C0] expire_timers+0x328/0x6c0 [ 141.305503][ C0] __run_timers+0x624/0x9e0 [ 141.305503][ C0] run_timer_softirq+0x2d/0x50 [ 141.305503][ C0] __do_softirq+0x1b9/0x715 [ 141.305503][ C0] ===================================================== [ 141.305503][ C0] ===================================================== [ 141.305503][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x28c/0x1f60 [ 141.305503][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 141.305503][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.305503][ C0] Call Trace: [ 141.305503][ C0] [ 141.305503][ C0] dump_stack+0x24c/0x2e0 [ 141.305503][ C0] kmsan_report+0xfb/0x1e0 [ 141.305503][ C0] __msan_warning+0x5c/0xa0 [ 141.305503][ C0] ath9k_htc_rx_msg+0x28c/0x1f60 [ 141.305503][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 141.305503][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 141.305503][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 141.305503][ C0] dummy_timer+0xda7/0x74f0 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 141.305503][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.305503][ C0] call_timer_fn+0x7d/0x450 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] expire_timers+0x328/0x6c0 [ 141.305503][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.305503][ C0] __run_timers+0x624/0x9e0 [ 141.305503][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 141.305503][ C0] ? irqtime_account_irq+0x5e/0x380 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 141.305503][ C0] run_timer_softirq+0x2d/0x50 [ 141.305503][ C0] __do_softirq+0x1b9/0x715 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] __irq_exit_rcu+0x22f/0x280 [ 141.305503][ C0] irq_exit_rcu+0xe/0x10 [ 141.305503][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 141.305503][ C0] [ 141.305503][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 141.305503][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 141.305503][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 141.305503][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 141.305503][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 141.305503][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.305503][ C0] RBP: ffffffff91603c08 R08: ffffffff86904dce R09: ffff88813fffa000 [ 141.305503][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 141.305503][ C0] R13: ffff888103d5c064 R14: 0000000000000000 R15: ffffffff91631ac8 [ 141.305503][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 141.305503][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 141.305503][ C0] cpuidle_enter_state+0x99e/0x1750 [ 141.305503][ C0] cpuidle_enter+0xe3/0x170 [ 141.305503][ C0] do_idle+0x5df/0x790 [ 141.305503][ C0] cpu_startup_entry+0x45/0x50 [ 141.305503][ C0] rest_init+0x1c8/0x1f0 [ 141.305503][ C0] arch_call_rest_init+0x13/0x15 [ 141.305503][ C0] start_kernel+0xa17/0xbd8 [ 141.305503][ C0] x86_64_start_reservations+0x2a/0x2c [ 141.305503][ C0] x86_64_start_kernel+0x86/0x89 [ 141.305503][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 141.305503][ C0] [ 141.305503][ C0] Uninit was created at: [ 141.305503][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 141.305503][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 141.305503][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 141.305503][ C0] __alloc_skb+0x4dd/0xe90 [ 141.305503][ C0] __netdev_alloc_skb+0x45d/0x810 [ 141.305503][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 141.305503][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.305503][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.305503][ C0] dummy_timer+0xda7/0x74f0 [ 141.305503][ C0] call_timer_fn+0x7d/0x450 [ 141.305503][ C0] expire_timers+0x328/0x6c0 [ 141.305503][ C0] __run_timers+0x624/0x9e0 [ 141.305503][ C0] run_timer_softirq+0x2d/0x50 [ 141.305503][ C0] __do_softirq+0x1b9/0x715 [ 141.305503][ C0] ===================================================== [ 141.305503][ C0] ===================================================== [ 141.305503][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x4c0/0x1f60 [ 141.305503][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 141.305503][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.305503][ C0] Call Trace: [ 141.305503][ C0] [ 141.305503][ C0] dump_stack+0x24c/0x2e0 [ 141.305503][ C0] kmsan_report+0xfb/0x1e0 [ 141.305503][ C0] __msan_warning+0x5c/0xa0 [ 141.305503][ C0] ath9k_htc_rx_msg+0x4c0/0x1f60 [ 141.305503][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 141.305503][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 141.305503][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 141.305503][ C0] dummy_timer+0xda7/0x74f0 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 141.305503][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.305503][ C0] call_timer_fn+0x7d/0x450 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] expire_timers+0x328/0x6c0 [ 141.305503][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.305503][ C0] __run_timers+0x624/0x9e0 [ 141.305503][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 141.305503][ C0] ? irqtime_account_irq+0x5e/0x380 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 141.305503][ C0] run_timer_softirq+0x2d/0x50 [ 141.305503][ C0] __do_softirq+0x1b9/0x715 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] __irq_exit_rcu+0x22f/0x280 [ 141.305503][ C0] irq_exit_rcu+0xe/0x10 [ 141.305503][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 141.305503][ C0] [ 141.305503][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 141.305503][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 141.305503][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 141.305503][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 141.305503][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 141.305503][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.305503][ C0] RBP: ffffffff91603c08 R08: ffffffff86904dce R09: ffff88813fffa000 [ 141.305503][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 141.305503][ C0] R13: ffff888103d5c064 R14: 0000000000000000 R15: ffffffff91631ac8 [ 141.305503][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 141.305503][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 141.305503][ C0] cpuidle_enter_state+0x99e/0x1750 [ 141.305503][ C0] cpuidle_enter+0xe3/0x170 [ 141.305503][ C0] do_idle+0x5df/0x790 [ 141.305503][ C0] cpu_startup_entry+0x45/0x50 [ 141.305503][ C0] rest_init+0x1c8/0x1f0 [ 141.305503][ C0] arch_call_rest_init+0x13/0x15 [ 141.305503][ C0] start_kernel+0xa17/0xbd8 [ 141.305503][ C0] x86_64_start_reservations+0x2a/0x2c [ 141.305503][ C0] x86_64_start_kernel+0x86/0x89 [ 141.305503][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 141.305503][ C0] [ 141.305503][ C0] Uninit was created at: [ 141.305503][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 141.305503][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 141.305503][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 141.305503][ C0] __alloc_skb+0x4dd/0xe90 [ 141.305503][ C0] __netdev_alloc_skb+0x45d/0x810 [ 141.305503][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 141.305503][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.305503][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.305503][ C0] dummy_timer+0xda7/0x74f0 [ 141.305503][ C0] call_timer_fn+0x7d/0x450 [ 141.305503][ C0] expire_timers+0x328/0x6c0 [ 141.305503][ C0] __run_timers+0x624/0x9e0 [ 141.305503][ C0] run_timer_softirq+0x2d/0x50 [ 141.305503][ C0] __do_softirq+0x1b9/0x715 [ 141.305503][ C0] ===================================================== [ 141.305503][ C0] ===================================================== [ 141.305503][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x7b8/0x1f60 [ 141.305503][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 141.305503][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.305503][ C0] Call Trace: [ 141.305503][ C0] [ 141.305503][ C0] dump_stack+0x24c/0x2e0 [ 141.305503][ C0] kmsan_report+0xfb/0x1e0 [ 141.305503][ C0] __msan_warning+0x5c/0xa0 [ 141.305503][ C0] ath9k_htc_rx_msg+0x7b8/0x1f60 [ 141.305503][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 141.305503][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 141.305503][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 141.305503][ C0] dummy_timer+0xda7/0x74f0 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 141.305503][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.305503][ C0] call_timer_fn+0x7d/0x450 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] expire_timers+0x328/0x6c0 [ 141.305503][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.305503][ C0] __run_timers+0x624/0x9e0 [ 141.305503][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 141.305503][ C0] ? irqtime_account_irq+0x5e/0x380 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 141.305503][ C0] run_timer_softirq+0x2d/0x50 [ 141.305503][ C0] __do_softirq+0x1b9/0x715 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] __irq_exit_rcu+0x22f/0x280 [ 141.305503][ C0] irq_exit_rcu+0xe/0x10 [ 141.305503][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 141.305503][ C0] [ 141.305503][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 141.305503][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 141.305503][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 141.305503][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 141.305503][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 141.305503][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.305503][ C0] RBP: ffffffff91603c08 R08: ffffffff86904dce R09: ffff88813fffa000 [ 141.305503][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 141.305503][ C0] R13: ffff888103d5c064 R14: 0000000000000000 R15: ffffffff91631ac8 [ 141.305503][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 141.305503][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 141.305503][ C0] cpuidle_enter_state+0x99e/0x1750 [ 141.305503][ C0] cpuidle_enter+0xe3/0x170 [ 141.305503][ C0] do_idle+0x5df/0x790 [ 141.305503][ C0] cpu_startup_entry+0x45/0x50 [ 141.305503][ C0] rest_init+0x1c8/0x1f0 [ 141.305503][ C0] arch_call_rest_init+0x13/0x15 [ 141.305503][ C0] start_kernel+0xa17/0xbd8 [ 141.305503][ C0] x86_64_start_reservations+0x2a/0x2c [ 141.305503][ C0] x86_64_start_kernel+0x86/0x89 [ 141.305503][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 141.305503][ C0] [ 141.305503][ C0] Uninit was created at: [ 141.305503][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 141.305503][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 141.305503][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 141.305503][ C0] __alloc_skb+0x4dd/0xe90 [ 141.305503][ C0] __netdev_alloc_skb+0x45d/0x810 [ 141.305503][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 141.305503][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.305503][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.305503][ C0] dummy_timer+0xda7/0x74f0 [ 141.305503][ C0] call_timer_fn+0x7d/0x450 [ 141.305503][ C0] expire_timers+0x328/0x6c0 [ 141.305503][ C0] __run_timers+0x624/0x9e0 [ 141.305503][ C0] run_timer_softirq+0x2d/0x50 [ 141.305503][ C0] __do_softirq+0x1b9/0x715 [ 141.305503][ C0] ===================================================== [ 141.305503][ C0] ===================================================== [ 141.305503][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x80c/0x1f60 [ 141.305503][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 141.305503][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.305503][ C0] Call Trace: [ 141.305503][ C0] [ 141.305503][ C0] dump_stack+0x24c/0x2e0 [ 141.305503][ C0] kmsan_report+0xfb/0x1e0 [ 141.305503][ C0] __msan_warning+0x5c/0xa0 [ 141.305503][ C0] ath9k_htc_rx_msg+0x80c/0x1f60 [ 141.305503][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 141.305503][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 141.305503][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 141.305503][ C0] dummy_timer+0xda7/0x74f0 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 141.305503][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.305503][ C0] call_timer_fn+0x7d/0x450 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] expire_timers+0x328/0x6c0 [ 141.305503][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.305503][ C0] __run_timers+0x624/0x9e0 [ 141.305503][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 141.305503][ C0] ? irqtime_account_irq+0x5e/0x380 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 141.305503][ C0] run_timer_softirq+0x2d/0x50 [ 141.305503][ C0] __do_softirq+0x1b9/0x715 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] __irq_exit_rcu+0x22f/0x280 [ 141.305503][ C0] irq_exit_rcu+0xe/0x10 [ 141.305503][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 141.305503][ C0] [ 141.305503][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 141.305503][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 141.305503][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 141.305503][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 141.305503][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 141.305503][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.305503][ C0] RBP: ffffffff91603c08 R08: ffffffff86904dce R09: ffff88813fffa000 [ 141.305503][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 141.305503][ C0] R13: ffff888103d5c064 R14: 0000000000000000 R15: ffffffff91631ac8 [ 141.305503][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 141.305503][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 141.305503][ C0] cpuidle_enter_state+0x99e/0x1750 [ 141.305503][ C0] cpuidle_enter+0xe3/0x170 [ 141.305503][ C0] do_idle+0x5df/0x790 [ 141.305503][ C0] cpu_startup_entry+0x45/0x50 [ 141.305503][ C0] rest_init+0x1c8/0x1f0 [ 141.305503][ C0] arch_call_rest_init+0x13/0x15 [ 141.305503][ C0] start_kernel+0xa17/0xbd8 [ 141.305503][ C0] x86_64_start_reservations+0x2a/0x2c [ 141.305503][ C0] x86_64_start_kernel+0x86/0x89 [ 141.305503][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 141.305503][ C0] [ 141.305503][ C0] Uninit was created at: [ 141.305503][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 141.305503][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 141.305503][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 141.305503][ C0] __alloc_skb+0x4dd/0xe90 [ 141.305503][ C0] __netdev_alloc_skb+0x45d/0x810 [ 141.305503][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 141.305503][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.305503][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.305503][ C0] dummy_timer+0xda7/0x74f0 [ 141.305503][ C0] call_timer_fn+0x7d/0x450 [ 141.305503][ C0] expire_timers+0x328/0x6c0 [ 141.305503][ C0] __run_timers+0x624/0x9e0 [ 141.305503][ C0] run_timer_softirq+0x2d/0x50 [ 141.305503][ C0] __do_softirq+0x1b9/0x715 [ 141.305503][ C0] ===================================================== [ 141.305503][ C0] ===================================================== [ 141.305503][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x96f/0x1f60 [ 141.305503][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 141.305503][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.305503][ C0] Call Trace: [ 141.305503][ C0] [ 141.305503][ C0] dump_stack+0x24c/0x2e0 [ 141.305503][ C0] kmsan_report+0xfb/0x1e0 [ 141.305503][ C0] __msan_warning+0x5c/0xa0 [ 141.305503][ C0] ath9k_htc_rx_msg+0x96f/0x1f60 [ 141.305503][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 141.305503][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 141.305503][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 141.305503][ C0] dummy_timer+0xda7/0x74f0 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 141.305503][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.305503][ C0] call_timer_fn+0x7d/0x450 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] expire_timers+0x328/0x6c0 [ 141.305503][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.305503][ C0] __run_timers+0x624/0x9e0 [ 141.305503][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 141.305503][ C0] ? irqtime_account_irq+0x5e/0x380 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 141.305503][ C0] run_timer_softirq+0x2d/0x50 [ 141.305503][ C0] __do_softirq+0x1b9/0x715 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] __irq_exit_rcu+0x22f/0x280 [ 141.305503][ C0] irq_exit_rcu+0xe/0x10 [ 141.305503][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 141.305503][ C0] [ 141.305503][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 141.305503][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 141.305503][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 141.305503][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 141.305503][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 141.305503][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.305503][ C0] RBP: ffffffff91603c08 R08: ffffffff86904dce R09: ffff88813fffa000 [ 141.305503][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 141.305503][ C0] R13: ffff888103d5c064 R14: 0000000000000000 R15: ffffffff91631ac8 [ 141.305503][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 141.305503][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 141.305503][ C0] cpuidle_enter_state+0x99e/0x1750 [ 141.305503][ C0] cpuidle_enter+0xe3/0x170 [ 141.305503][ C0] do_idle+0x5df/0x790 [ 141.305503][ C0] cpu_startup_entry+0x45/0x50 [ 141.305503][ C0] rest_init+0x1c8/0x1f0 [ 141.305503][ C0] arch_call_rest_init+0x13/0x15 [ 141.305503][ C0] start_kernel+0xa17/0xbd8 [ 141.305503][ C0] x86_64_start_reservations+0x2a/0x2c [ 141.305503][ C0] x86_64_start_kernel+0x86/0x89 [ 141.305503][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 141.305503][ C0] [ 141.305503][ C0] Uninit was created at: [ 141.305503][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 141.305503][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 141.305503][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 141.305503][ C0] __alloc_skb+0x4dd/0xe90 [ 141.305503][ C0] __netdev_alloc_skb+0x45d/0x810 [ 141.305503][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 141.305503][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.305503][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.305503][ C0] dummy_timer+0xda7/0x74f0 [ 141.305503][ C0] call_timer_fn+0x7d/0x450 [ 141.305503][ C0] expire_timers+0x328/0x6c0 [ 141.305503][ C0] __run_timers+0x624/0x9e0 [ 141.305503][ C0] run_timer_softirq+0x2d/0x50 [ 141.305503][ C0] __do_softirq+0x1b9/0x715 [ 141.305503][ C0] ===================================================== [ 141.305503][ C0] ===================================================== [ 141.305503][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x28c/0x1f60 [ 141.305503][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 141.305503][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.305503][ C0] Call Trace: [ 141.305503][ C0] [ 141.305503][ C0] dump_stack+0x24c/0x2e0 [ 141.305503][ C0] kmsan_report+0xfb/0x1e0 [ 141.305503][ C0] __msan_warning+0x5c/0xa0 [ 141.305503][ C0] ath9k_htc_rx_msg+0x28c/0x1f60 [ 141.305503][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 141.305503][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 141.305503][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 141.305503][ C0] dummy_timer+0xda7/0x74f0 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 141.305503][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.305503][ C0] call_timer_fn+0x7d/0x450 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] expire_timers+0x328/0x6c0 [ 141.305503][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.305503][ C0] __run_timers+0x624/0x9e0 [ 141.305503][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 141.305503][ C0] ? irqtime_account_irq+0x5e/0x380 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 141.305503][ C0] run_timer_softirq+0x2d/0x50 [ 141.305503][ C0] __do_softirq+0x1b9/0x715 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] __irq_exit_rcu+0x22f/0x280 [ 141.305503][ C0] irq_exit_rcu+0xe/0x10 [ 141.305503][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 141.305503][ C0] [ 141.305503][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 141.305503][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 141.305503][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 141.305503][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 141.305503][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 141.305503][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.305503][ C0] RBP: ffffffff91603c08 R08: ffffffff86904dce R09: ffff88813fffa000 [ 141.305503][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 141.305503][ C0] R13: ffff888103d5c064 R14: 0000000000000000 R15: ffffffff91631ac8 [ 141.305503][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 141.305503][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 141.305503][ C0] cpuidle_enter_state+0x99e/0x1750 [ 141.305503][ C0] cpuidle_enter+0xe3/0x170 [ 141.305503][ C0] do_idle+0x5df/0x790 [ 141.305503][ C0] cpu_startup_entry+0x45/0x50 [ 141.305503][ C0] rest_init+0x1c8/0x1f0 [ 141.305503][ C0] arch_call_rest_init+0x13/0x15 [ 141.305503][ C0] start_kernel+0xa17/0xbd8 [ 141.305503][ C0] x86_64_start_reservations+0x2a/0x2c [ 141.305503][ C0] x86_64_start_kernel+0x86/0x89 [ 141.305503][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 141.305503][ C0] [ 141.305503][ C0] Uninit was created at: [ 141.305503][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 141.305503][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 141.305503][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 141.305503][ C0] __alloc_skb+0x4dd/0xe90 [ 141.305503][ C0] __netdev_alloc_skb+0x45d/0x810 [ 141.305503][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 141.305503][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.305503][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.305503][ C0] dummy_timer+0xda7/0x74f0 [ 141.305503][ C0] call_timer_fn+0x7d/0x450 [ 141.305503][ C0] expire_timers+0x328/0x6c0 [ 141.305503][ C0] __run_timers+0x624/0x9e0 [ 141.305503][ C0] run_timer_softirq+0x2d/0x50 [ 141.305503][ C0] __do_softirq+0x1b9/0x715 [ 141.305503][ C0] ===================================================== [ 141.305503][ C0] ===================================================== [ 141.305503][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x4c0/0x1f60 [ 141.305503][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 141.305503][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.305503][ C0] Call Trace: [ 141.305503][ C0] [ 141.305503][ C0] dump_stack+0x24c/0x2e0 [ 141.305503][ C0] kmsan_report+0xfb/0x1e0 [ 141.305503][ C0] __msan_warning+0x5c/0xa0 [ 141.305503][ C0] ath9k_htc_rx_msg+0x4c0/0x1f60 [ 141.305503][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 141.305503][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 141.305503][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 141.305503][ C0] dummy_timer+0xda7/0x74f0 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 141.305503][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.305503][ C0] call_timer_fn+0x7d/0x450 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] expire_timers+0x328/0x6c0 [ 141.305503][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.305503][ C0] __run_timers+0x624/0x9e0 [ 141.305503][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 141.305503][ C0] ? irqtime_account_irq+0x5e/0x380 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 141.305503][ C0] run_timer_softirq+0x2d/0x50 [ 141.305503][ C0] __do_softirq+0x1b9/0x715 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] __irq_exit_rcu+0x22f/0x280 [ 141.305503][ C0] irq_exit_rcu+0xe/0x10 [ 141.305503][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 141.305503][ C0] [ 141.305503][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 141.305503][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 141.305503][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 141.305503][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 141.305503][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 141.305503][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.305503][ C0] RBP: ffffffff91603c08 R08: ffffffff86904dce R09: ffff88813fffa000 [ 141.305503][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 141.305503][ C0] R13: ffff888103d5c064 R14: 0000000000000000 R15: ffffffff91631ac8 [ 141.305503][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 141.305503][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 141.305503][ C0] cpuidle_enter_state+0x99e/0x1750 [ 141.305503][ C0] cpuidle_enter+0xe3/0x170 [ 141.305503][ C0] do_idle+0x5df/0x790 [ 141.305503][ C0] cpu_startup_entry+0x45/0x50 [ 141.305503][ C0] rest_init+0x1c8/0x1f0 [ 141.305503][ C0] arch_call_rest_init+0x13/0x15 [ 141.305503][ C0] start_kernel+0xa17/0xbd8 [ 141.305503][ C0] x86_64_start_reservations+0x2a/0x2c [ 141.305503][ C0] x86_64_start_kernel+0x86/0x89 [ 141.305503][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 141.305503][ C0] [ 141.305503][ C0] Uninit was created at: [ 141.305503][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 141.305503][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 141.305503][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 141.305503][ C0] __alloc_skb+0x4dd/0xe90 [ 141.305503][ C0] __netdev_alloc_skb+0x45d/0x810 [ 141.305503][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 141.305503][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.305503][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.305503][ C0] dummy_timer+0xda7/0x74f0 [ 141.305503][ C0] call_timer_fn+0x7d/0x450 [ 141.305503][ C0] expire_timers+0x328/0x6c0 [ 141.305503][ C0] __run_timers+0x624/0x9e0 [ 141.305503][ C0] run_timer_softirq+0x2d/0x50 [ 141.305503][ C0] __do_softirq+0x1b9/0x715 [ 141.305503][ C0] ===================================================== [ 141.305503][ C0] ===================================================== [ 141.305503][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x7b8/0x1f60 [ 141.305503][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 141.305503][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.305503][ C0] Call Trace: [ 141.305503][ C0] [ 141.305503][ C0] dump_stack+0x24c/0x2e0 [ 141.305503][ C0] kmsan_report+0xfb/0x1e0 [ 141.305503][ C0] __msan_warning+0x5c/0xa0 [ 141.305503][ C0] ath9k_htc_rx_msg+0x7b8/0x1f60 [ 141.305503][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 141.305503][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 141.305503][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 141.305503][ C0] dummy_timer+0xda7/0x74f0 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 141.305503][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.305503][ C0] call_timer_fn+0x7d/0x450 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] expire_timers+0x328/0x6c0 [ 141.305503][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.305503][ C0] __run_timers+0x624/0x9e0 [ 141.305503][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 141.305503][ C0] ? irqtime_account_irq+0x5e/0x380 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 141.305503][ C0] run_timer_softirq+0x2d/0x50 [ 141.305503][ C0] __do_softirq+0x1b9/0x715 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] __irq_exit_rcu+0x22f/0x280 [ 141.305503][ C0] irq_exit_rcu+0xe/0x10 [ 141.305503][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 141.305503][ C0] [ 141.305503][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 141.305503][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 141.305503][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 141.305503][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 141.305503][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 141.305503][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.305503][ C0] RBP: ffffffff91603c08 R08: ffffffff86904dce R09: ffff88813fffa000 [ 141.305503][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 141.305503][ C0] R13: ffff888103d5c064 R14: 0000000000000000 R15: ffffffff91631ac8 [ 141.305503][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 141.305503][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 141.305503][ C0] cpuidle_enter_state+0x99e/0x1750 [ 141.305503][ C0] cpuidle_enter+0xe3/0x170 [ 141.305503][ C0] do_idle+0x5df/0x790 [ 141.305503][ C0] cpu_startup_entry+0x45/0x50 [ 141.305503][ C0] rest_init+0x1c8/0x1f0 [ 141.305503][ C0] arch_call_rest_init+0x13/0x15 [ 141.305503][ C0] start_kernel+0xa17/0xbd8 [ 141.305503][ C0] x86_64_start_reservations+0x2a/0x2c [ 141.305503][ C0] x86_64_start_kernel+0x86/0x89 [ 141.305503][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 141.305503][ C0] [ 141.305503][ C0] Uninit was created at: [ 141.305503][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 141.305503][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 141.305503][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 141.305503][ C0] __alloc_skb+0x4dd/0xe90 [ 141.305503][ C0] __netdev_alloc_skb+0x45d/0x810 [ 141.305503][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 141.305503][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.305503][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.305503][ C0] dummy_timer+0xda7/0x74f0 [ 141.305503][ C0] call_timer_fn+0x7d/0x450 [ 141.305503][ C0] expire_timers+0x328/0x6c0 [ 141.305503][ C0] __run_timers+0x624/0x9e0 [ 141.305503][ C0] run_timer_softirq+0x2d/0x50 [ 141.305503][ C0] __do_softirq+0x1b9/0x715 [ 141.305503][ C0] ===================================================== [ 141.305503][ C0] ===================================================== [ 141.305503][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x80c/0x1f60 [ 141.305503][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 141.305503][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.305503][ C0] Call Trace: [ 141.305503][ C0] [ 141.305503][ C0] dump_stack+0x24c/0x2e0 [ 141.305503][ C0] kmsan_report+0xfb/0x1e0 [ 141.305503][ C0] __msan_warning+0x5c/0xa0 [ 141.305503][ C0] ath9k_htc_rx_msg+0x80c/0x1f60 [ 141.305503][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 141.305503][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 141.305503][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 141.305503][ C0] dummy_timer+0xda7/0x74f0 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 141.305503][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.305503][ C0] call_timer_fn+0x7d/0x450 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] expire_timers+0x328/0x6c0 [ 141.305503][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.305503][ C0] __run_timers+0x624/0x9e0 [ 141.305503][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 141.305503][ C0] ? irqtime_account_irq+0x5e/0x380 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 141.305503][ C0] run_timer_softirq+0x2d/0x50 [ 141.305503][ C0] __do_softirq+0x1b9/0x715 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] __irq_exit_rcu+0x22f/0x280 [ 141.305503][ C0] irq_exit_rcu+0xe/0x10 [ 141.305503][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 141.305503][ C0] [ 141.305503][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 141.305503][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 141.305503][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 141.305503][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 141.305503][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 141.305503][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.305503][ C0] RBP: ffffffff91603c08 R08: ffffffff86904dce R09: ffff88813fffa000 [ 141.305503][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 141.305503][ C0] R13: ffff888103d5c064 R14: 0000000000000000 R15: ffffffff91631ac8 [ 141.305503][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 141.305503][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 141.305503][ C0] cpuidle_enter_state+0x99e/0x1750 [ 141.305503][ C0] cpuidle_enter+0xe3/0x170 [ 141.305503][ C0] do_idle+0x5df/0x790 [ 141.305503][ C0] cpu_startup_entry+0x45/0x50 [ 141.305503][ C0] rest_init+0x1c8/0x1f0 [ 141.305503][ C0] arch_call_rest_init+0x13/0x15 [ 141.305503][ C0] start_kernel+0xa17/0xbd8 [ 141.305503][ C0] x86_64_start_reservations+0x2a/0x2c [ 141.305503][ C0] x86_64_start_kernel+0x86/0x89 [ 141.305503][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 141.305503][ C0] [ 141.305503][ C0] Uninit was created at: [ 141.305503][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 141.305503][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 141.305503][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 141.305503][ C0] __alloc_skb+0x4dd/0xe90 [ 141.305503][ C0] __netdev_alloc_skb+0x45d/0x810 [ 141.305503][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 141.305503][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.305503][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.305503][ C0] dummy_timer+0xda7/0x74f0 [ 141.305503][ C0] call_timer_fn+0x7d/0x450 [ 141.305503][ C0] expire_timers+0x328/0x6c0 [ 141.305503][ C0] __run_timers+0x624/0x9e0 [ 141.305503][ C0] run_timer_softirq+0x2d/0x50 [ 141.305503][ C0] __do_softirq+0x1b9/0x715 [ 141.305503][ C0] ===================================================== [ 141.305503][ C0] ===================================================== [ 141.305503][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x96f/0x1f60 [ 141.305503][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 141.305503][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.305503][ C0] Call Trace: [ 141.305503][ C0] [ 141.305503][ C0] dump_stack+0x24c/0x2e0 [ 141.305503][ C0] kmsan_report+0xfb/0x1e0 [ 141.305503][ C0] __msan_warning+0x5c/0xa0 [ 141.305503][ C0] ath9k_htc_rx_msg+0x96f/0x1f60 [ 141.305503][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 141.305503][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 141.305503][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 141.305503][ C0] dummy_timer+0xda7/0x74f0 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 141.305503][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.305503][ C0] call_timer_fn+0x7d/0x450 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] expire_timers+0x328/0x6c0 [ 141.305503][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.305503][ C0] __run_timers+0x624/0x9e0 [ 141.305503][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 141.305503][ C0] ? irqtime_account_irq+0x5e/0x380 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 141.305503][ C0] run_timer_softirq+0x2d/0x50 [ 141.305503][ C0] __do_softirq+0x1b9/0x715 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] __irq_exit_rcu+0x22f/0x280 [ 141.305503][ C0] irq_exit_rcu+0xe/0x10 [ 141.305503][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 141.305503][ C0] [ 141.305503][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 141.305503][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 141.305503][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 141.305503][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 141.305503][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 141.305503][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.305503][ C0] RBP: ffffffff91603c08 R08: ffffffff86904dce R09: ffff88813fffa000 [ 141.305503][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 141.305503][ C0] R13: ffff888103d5c064 R14: 0000000000000000 R15: ffffffff91631ac8 [ 141.305503][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 141.305503][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 141.305503][ C0] cpuidle_enter_state+0x99e/0x1750 [ 141.305503][ C0] cpuidle_enter+0xe3/0x170 [ 141.305503][ C0] do_idle+0x5df/0x790 [ 141.305503][ C0] cpu_startup_entry+0x45/0x50 [ 141.305503][ C0] rest_init+0x1c8/0x1f0 [ 141.305503][ C0] arch_call_rest_init+0x13/0x15 [ 141.305503][ C0] start_kernel+0xa17/0xbd8 [ 141.305503][ C0] x86_64_start_reservations+0x2a/0x2c [ 141.305503][ C0] x86_64_start_kernel+0x86/0x89 [ 141.305503][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 141.305503][ C0] [ 141.305503][ C0] Uninit was created at: [ 141.305503][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 141.305503][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 141.305503][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 141.305503][ C0] __alloc_skb+0x4dd/0xe90 [ 141.305503][ C0] __netdev_alloc_skb+0x45d/0x810 [ 141.305503][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 141.305503][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.305503][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.305503][ C0] dummy_timer+0xda7/0x74f0 [ 141.305503][ C0] call_timer_fn+0x7d/0x450 [ 141.305503][ C0] expire_timers+0x328/0x6c0 [ 141.305503][ C0] __run_timers+0x624/0x9e0 [ 141.305503][ C0] run_timer_softirq+0x2d/0x50 [ 141.305503][ C0] __do_softirq+0x1b9/0x715 [ 141.305503][ C0] ===================================================== [ 141.305503][ C0] ===================================================== [ 141.305503][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x28c/0x1f60 [ 141.305503][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 141.305503][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.305503][ C0] Call Trace: [ 141.305503][ C0] [ 141.305503][ C0] dump_stack+0x24c/0x2e0 [ 141.305503][ C0] kmsan_report+0xfb/0x1e0 [ 141.305503][ C0] __msan_warning+0x5c/0xa0 [ 141.305503][ C0] ath9k_htc_rx_msg+0x28c/0x1f60 [ 141.305503][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 141.305503][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 141.305503][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 141.305503][ C0] dummy_timer+0xda7/0x74f0 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 141.305503][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.305503][ C0] call_timer_fn+0x7d/0x450 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] expire_timers+0x328/0x6c0 [ 141.305503][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.305503][ C0] __run_timers+0x624/0x9e0 [ 141.305503][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 141.305503][ C0] ? irqtime_account_irq+0x5e/0x380 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 141.305503][ C0] run_timer_softirq+0x2d/0x50 [ 141.305503][ C0] __do_softirq+0x1b9/0x715 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] __irq_exit_rcu+0x22f/0x280 [ 141.305503][ C0] irq_exit_rcu+0xe/0x10 [ 141.305503][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 141.305503][ C0] [ 141.305503][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 141.305503][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 141.305503][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 141.305503][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 141.305503][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 141.305503][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.305503][ C0] RBP: ffffffff91603c08 R08: ffffffff86904dce R09: ffff88813fffa000 [ 141.305503][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 141.305503][ C0] R13: ffff888103d5c064 R14: 0000000000000000 R15: ffffffff91631ac8 [ 141.305503][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 141.305503][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 141.305503][ C0] cpuidle_enter_state+0x99e/0x1750 [ 141.305503][ C0] cpuidle_enter+0xe3/0x170 [ 141.305503][ C0] do_idle+0x5df/0x790 [ 141.305503][ C0] cpu_startup_entry+0x45/0x50 [ 141.305503][ C0] rest_init+0x1c8/0x1f0 [ 141.305503][ C0] arch_call_rest_init+0x13/0x15 [ 141.305503][ C0] start_kernel+0xa17/0xbd8 [ 141.305503][ C0] x86_64_start_reservations+0x2a/0x2c [ 141.305503][ C0] x86_64_start_kernel+0x86/0x89 [ 141.305503][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 141.305503][ C0] [ 141.305503][ C0] Uninit was created at: [ 141.305503][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 141.305503][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 141.305503][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 141.305503][ C0] __alloc_skb+0x4dd/0xe90 [ 141.305503][ C0] __netdev_alloc_skb+0x45d/0x810 [ 141.305503][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 141.305503][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.305503][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.305503][ C0] dummy_timer+0xda7/0x74f0 [ 141.305503][ C0] call_timer_fn+0x7d/0x450 [ 141.305503][ C0] expire_timers+0x328/0x6c0 [ 141.305503][ C0] __run_timers+0x624/0x9e0 [ 141.305503][ C0] run_timer_softirq+0x2d/0x50 [ 141.305503][ C0] __do_softirq+0x1b9/0x715 [ 141.305503][ C0] ===================================================== [ 141.305503][ C0] ===================================================== [ 141.305503][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x4c0/0x1f60 [ 141.305503][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 141.305503][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.305503][ C0] Call Trace: [ 141.305503][ C0] [ 141.305503][ C0] dump_stack+0x24c/0x2e0 [ 141.305503][ C0] kmsan_report+0xfb/0x1e0 [ 141.305503][ C0] __msan_warning+0x5c/0xa0 [ 141.305503][ C0] ath9k_htc_rx_msg+0x4c0/0x1f60 [ 141.305503][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 141.305503][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 141.305503][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 141.305503][ C0] dummy_timer+0xda7/0x74f0 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 141.305503][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.305503][ C0] call_timer_fn+0x7d/0x450 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] expire_timers+0x328/0x6c0 [ 141.305503][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.305503][ C0] __run_timers+0x624/0x9e0 [ 141.305503][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 141.305503][ C0] ? irqtime_account_irq+0x5e/0x380 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 141.305503][ C0] run_timer_softirq+0x2d/0x50 [ 141.305503][ C0] __do_softirq+0x1b9/0x715 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] __irq_exit_rcu+0x22f/0x280 [ 141.305503][ C0] irq_exit_rcu+0xe/0x10 [ 141.305503][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 141.305503][ C0] [ 141.305503][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 141.305503][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 141.305503][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 141.305503][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 141.305503][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 141.305503][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.305503][ C0] RBP: ffffffff91603c08 R08: ffffffff86904dce R09: ffff88813fffa000 [ 141.305503][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 141.305503][ C0] R13: ffff888103d5c064 R14: 0000000000000000 R15: ffffffff91631ac8 [ 141.305503][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 141.305503][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 141.305503][ C0] cpuidle_enter_state+0x99e/0x1750 [ 141.305503][ C0] cpuidle_enter+0xe3/0x170 [ 141.305503][ C0] do_idle+0x5df/0x790 [ 141.305503][ C0] cpu_startup_entry+0x45/0x50 [ 141.305503][ C0] rest_init+0x1c8/0x1f0 [ 141.305503][ C0] arch_call_rest_init+0x13/0x15 [ 141.305503][ C0] start_kernel+0xa17/0xbd8 [ 141.305503][ C0] x86_64_start_reservations+0x2a/0x2c [ 141.305503][ C0] x86_64_start_kernel+0x86/0x89 [ 141.305503][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 141.305503][ C0] [ 141.305503][ C0] Uninit was created at: [ 141.305503][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 141.305503][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 141.305503][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 141.305503][ C0] __alloc_skb+0x4dd/0xe90 [ 141.305503][ C0] __netdev_alloc_skb+0x45d/0x810 [ 141.305503][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 141.305503][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.305503][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.305503][ C0] dummy_timer+0xda7/0x74f0 [ 141.305503][ C0] call_timer_fn+0x7d/0x450 [ 141.305503][ C0] expire_timers+0x328/0x6c0 [ 141.305503][ C0] __run_timers+0x624/0x9e0 [ 141.305503][ C0] run_timer_softirq+0x2d/0x50 [ 141.305503][ C0] __do_softirq+0x1b9/0x715 [ 141.305503][ C0] ===================================================== [ 141.305503][ C0] ===================================================== [ 141.305503][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x7b8/0x1f60 [ 141.305503][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 141.305503][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.305503][ C0] Call Trace: [ 141.305503][ C0] [ 141.305503][ C0] dump_stack+0x24c/0x2e0 [ 141.305503][ C0] kmsan_report+0xfb/0x1e0 [ 141.305503][ C0] __msan_warning+0x5c/0xa0 [ 141.305503][ C0] ath9k_htc_rx_msg+0x7b8/0x1f60 [ 141.305503][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 141.305503][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 141.305503][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 141.305503][ C0] dummy_timer+0xda7/0x74f0 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 141.305503][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.305503][ C0] call_timer_fn+0x7d/0x450 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] expire_timers+0x328/0x6c0 [ 141.305503][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.305503][ C0] __run_timers+0x624/0x9e0 [ 141.305503][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 141.305503][ C0] ? irqtime_account_irq+0x5e/0x380 [ 141.305503][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.305503][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 141.305503][ C0] run_timer_softirq+0x2d/0x50 [ 141.305503][ C0] __do_softirq+0x1b9/0x715 [ 141.305503][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.305503][ C0] __irq_exit_rcu+0x22f/0x280 [ 141.305503][ C0] irq_exit_rcu+0xe/0x10 [ 141.305503][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 141.305503][ C0] [ 141.305503][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 141.305503][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 141.305503][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 141.305503][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 141.305503][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 141.305503][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.305503][ C0] RBP: ffffffff91603c08 R08: ffffffff86904dce R09: ffff88813fffa000 [ 141.305503][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 141.305503][ C0] R13: ffff888103d5c064 R14: 0000000000000000 R15: ffffffff91631ac8 [ 141.305503][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 141.305503][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 141.305503][ C0] cpuidle_enter_state+0x99e/0x1750 [ 141.305503][ C0] cpuidle_enter+0xe3/0x170 [ 141.305503][ C0] do_idle+0x5df/0x790 [ 141.305503][ C0] cpu_startup_entry+0x45/0x50 [ 141.305503][ C0] rest_init+0x1c8/0x1f0 [ 141.305503][ C0] arch_call_rest_init+0x13/0x15 [ 141.305503][ C0] start_kernel+0xa17/0xbd8 [ 141.305503][ C0] x86_64_start_reservations+0x2a/0x2c [ 141.305503][ C0] x86_64_start_kernel+0x86/0x89 [ 141.305503][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 141.305503][ C0] [ 141.305503][ C0] Uninit was created at: